CVE-2026-108944 repository RAE Config-Driven Model Instantiation model_utils.py get_obj_from_str code injection

A security vulnerability has been detected in repository RAE up to a4d18c4db766419cbe7cb8c02cd9f7ceb0ec9041. Affected by this vulnerability is the function getobjfromstr of the file src/utils/modelutils.py of the component Config-Driven Model Instantiation. Such manipulation of the argument Targe...

CVE-2026-108944

The RAE repository is vulnerable to a code injection flaw within the Config-Driven Model Instantiation component. Specifically, the get_obj_from_str function in src/utils/model_utils.py allows for code injection when the Target argument is manipulated. This vulnerability requires local access to ...

EUVD-2026-98203

A security vulnerability has been detected in repository RAE up to a4d18c4db766419cbe7cb8c02cd9f7ceb0ec9041. Affected by this vulnerability is the function getobjfromstr of the file src/utils/modelutils.py of the component Config-Driven Model Instantiation. Such manipulation of the argument Targe...

siddheshtea (1.1.6) potentially affected by unknown CVE via nul-rae-naha (1.0.0)

nul-rae-naha NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nul-rae-naha and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163880...

Malicious code in nul-rae-naha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 305a606e9edeb69b0670c7df9efe80f4428be765d9f2e69b074edff7d5f22714 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudel-rae-naha (1.0.0)

nudel-rae-naha NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudel-rae-naha and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163699...

siddheshtea (1.1.6) potentially affected by unknown CVE via nuilav-rae-naha (1.0.0)

nuilav-rae-naha NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nuilav-rae-naha and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163858...

EUVD-2010-4703

Malware in sbrugna...

EUVD-2008-6359

Malware in sbrugna...

PT-2024-32340

Name of the Vulnerable Software and Affected Versions flexpmu affected versions not specified Description The issue is related to a possible arbitrary write due to uninitialized data in the pmucal rae handle seq int function of flexpmu cal rae.c. This could lead to local escalation of privilege...

rae-bbp.de Improper Access Control vulnerability OBB-3777102

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

rae-butzbach.de Cross Site Scripting vulnerability OBB-3162979

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

rae-goetz-monissen.de Cross Site Scripting vulnerability OBB-3035286

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

rae-butzbach.de Cross Site Scripting vulnerability OBB-3035284

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

rae-butzbach.de Cross Site Scripting vulnerability OBB-2313090

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2020-14558

Name of the Vulnerable Software and Affected Versions NETGEAR R6400, R6700, R7000, R7850, R7900, R8000, RS400, and XR300 routers with firmware 1.0.4.84 10.0.58 Description This issue allows remote attackers to execute arbitrary code on affected installations. Authentication is not required to...

PT-2017-19153

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.28 Description The issue allows remote attackers to cause a denial of service, potentially leading to a buffer overflow and application crash, or possibly having other unspecified impacts. This occurs through the...

Mailspect Control Panel 4.0.5 - Multiple Vulnerabilities

No description provided by source. Document Title: ============ Mailspect Control Panel version 4.0.5 Multiple Vulnerabilities Release Date: =========== June 21, 2014 Product & Service Introduction: ======================== Mailspect is the email security and archiving brand of RAE Internet Inc.,...

Mailspect Control Panel 4.0.5 - Multiple Vulnerabilities

Mailspect Control Panel version 4.0.5 suffers from remote code execution, arbitrary file read, and cross site scripting vulnerabilities. Document Title: ============ Mailspect Control Panel version 4.0.5 Multiple Vulnerabilities Release Date: =========== June 21, 2014 Product & Service...

Mailspect Control Panel 4.0.5 - Multiple Vulnerabilities

Document Title: ============ Mailspect Control Panel version 4.0.5 Multiple Vulnerabilities Release Date: =========== June 21, 2014 Product & Service Introduction: ======================== Mailspect is the email security and archiving brand of RAE Internet Inc., Tarrytown, New York. The Mailspect...